IPFW Questions about IPFW redirection

Hi,

I post here two questions from the freebsd-ipfw mailing list, maybe here someone can help. I'm really interested to know if it is possible to do the following on the FreeBSD IPFW firewall:
  1. With Linux, iptables and mod_conntrack_ftp you can allow only connecting to unprivileged port ranges for FTP passive mode to IP addresses who have properly established a TCP/21 port connection. Is this possible in FreeBSD with IPFW?
  2. I have a client A connecting to public IP 1.1.1.1 (for example) of host B. I want these packets at B to be redirected to host C but changing the source address of A from that packets with the IP address of B. Later when B receives back the answer from C that packets from the answer be redirected to A changing B's destination IP address to A's destination IP address. So when telnetting from client A to host B for example to port 5000, really, for it to be telnetting host C port 5000 for example and to have this this look like telnetting properly from A.
The most important question is number two. Could you help me please?

Best regards.
 
Back
Top